Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
File: pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft (raw, json)
Hash identifier: S8rgW8t4NO4E/RqCRCvEcEZTdBrn+pbmDjCG9D8k+PM=
Subject key identifier: EF:94:8D:23:46:04:CB:47:F4:4A:9C:39:0F:D0:53:22:3C:00:05:14
Authority key identifier: A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9
Certificate issuer: /CN=a57f291818d8719738268d844994a2e10824d4c9
Certificate serial: 019CAF113D6157294D356FD2CD6F7AD1A8F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 15:01:08 +0000
Manifest this update: Mon 02 Mar 2026 15:01:08 +0000
Manifest next update: Tue 03 Mar 2026 15:01:08 +0000
Files and hashes: 1: JPBii3Hqcq30q25CjK9-h-C44rw.roa (hash: 0nYkKiEoyllpIK9/qO7+AH5OvjbE8XnCXRin+xPio6U=)
2: pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl (hash: 60cShs+RdM8BAGXv6IOUrKR+1LLQfgtltihzlu8jXLU=)
3: qVXn2mio2xGIpazTfAYClCM2JZM.roa (hash: utP7O671cytqXjasGTBwll6HaIxFO1XJW1EluiUhDqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:11:3d:61:57:29:4d:35:6f:d2:cd:6f:7a:d1:a8:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57f291818d8719738268d844994a2e10824d4c9
Validity
Not Before: Mar 2 15:01:08 2026 GMT
Not After : Mar 3 15:01:08 2026 GMT
Subject: CN=ef948d234604cb47f44a9c390fd053223c000514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6e:e7:6c:cd:30:d6:a5:27:c2:13:1f:d2:86:
df:a5:e6:e3:7f:1f:49:c3:ed:74:1f:f3:5d:34:58:
d8:2e:45:05:bc:b2:8c:db:47:e4:97:3d:b3:36:d5:
96:f7:86:c4:49:71:61:c8:eb:f9:30:1c:b9:1d:ad:
6c:0d:55:87:7a:72:32:03:6e:42:6d:8f:5f:4a:42:
8e:79:e0:d9:06:1b:fc:09:11:29:b7:e1:04:5f:79:
b2:d9:5d:70:29:4f:90:6e:69:e9:d0:d1:60:f3:59:
da:b1:e1:46:42:f1:13:3d:23:70:88:06:69:d9:cc:
4a:bc:71:66:b7:cc:35:19:9c:cc:b9:18:1b:2c:d2:
81:64:19:25:9c:a6:dc:65:1c:d1:6f:09:3c:64:7c:
29:37:96:33:cf:37:5b:57:da:1f:59:b4:9b:70:6f:
ce:76:c5:88:16:10:77:75:52:6a:f4:5f:a4:67:fd:
6d:db:2d:c1:d3:64:88:58:5f:06:fe:e1:b6:c6:51:
c8:e3:45:63:d2:8d:57:99:46:88:0e:2b:78:4b:d0:
73:09:9d:2d:f0:d4:2f:2c:14:72:96:74:d2:cd:34:
bd:50:6e:bc:b1:80:89:15:82:6c:06:44:13:6e:08:
28:f0:67:02:80:b0:53:78:9e:5d:a1:f0:db:14:11:
3c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:94:8D:23:46:04:CB:47:F4:4A:9C:39:0F:D0:53:22:3C:00:05:14
X509v3 Authority Key Identifier:
keyid:A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:51:bb:d5:56:61:44:4c:41:26:fc:08:ed:c8:b0:d4:6f:dc:
51:1d:d1:76:9e:93:03:fe:ab:ef:64:85:08:da:e1:58:8e:47:
bb:9f:ba:57:62:de:6b:c3:13:6e:f2:f7:84:c7:b9:a3:04:b9:
68:b1:40:61:c0:26:01:3f:f4:66:ff:c6:35:95:eb:92:6e:3e:
86:b1:c4:39:8a:6d:03:a9:b7:10:31:03:6c:9c:cf:34:a5:f7:
ec:83:2f:dc:5b:d5:80:82:41:e4:fe:cc:60:f5:86:a1:22:7f:
58:86:8e:de:34:53:3f:d8:ca:41:57:62:d1:fc:05:5c:06:a0:
57:e9:c4:b8:07:65:c0:55:dd:1f:8a:61:f1:21:0c:77:73:14:
ef:f1:f8:2f:0a:ec:18:69:08:eb:87:94:cf:da:c5:23:c1:91:
d9:1b:9e:dd:b7:42:73:80:2e:7f:1a:7d:d4:97:34:97:15:62:
01:09:66:fb:7a:ce:bd:b1:03:ce:34:81:f4:13:bb:2c:c9:53:
e9:73:85:d4:92:d1:ff:74:6d:d0:cd:0a:45:00:6d:5d:e2:9b:
ae:e1:b5:4d:dc:d3:fa:d3:ac:8c:17:89:16:1d:de:2c:08:71:
14:53:d6:1b:86:8c:0c:82:6e:b1:05:dc:80:0f:3f:8f:e3:78:
f4:88:3d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:52:55 2026 by rpki-client